Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: p39pbD8pdKQALKx+TXd7Ph5hNXWocAovBESBmqUyktY=
Subject key identifier: C0:C4:D6:BE:1F:D7:67:D4:64:10:11:3A:5E:71:37:68:83:A4:13:85
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 019D37F763DA0C8BF57FDA7C88FB30B8CE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:52 +0000
Manifest this update: Sun 29 Mar 2026 05:00:52 +0000
Manifest next update: Mon 30 Mar 2026 05:00:52 +0000
Files and hashes: 1: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: 6zesbUlXzNYNgWhgA1xu5ejW1nHQyDF2AD/mcN3UOXg=)
2: zk24Xibi_69XM4miradQH_-zfVo.roa (hash: 8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:63:da:0c:8b:f5:7f:da:7c:88:fb:30:b8:ce:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Mar 29 05:00:52 2026 GMT
Not After : Mar 30 05:00:52 2026 GMT
Subject: CN=c0c4d6be1fd767d46410113a5e71376883a41385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:20:80:b8:8c:99:7c:77:fc:bd:21:cc:74:
59:48:59:47:00:35:be:63:80:81:ff:37:8b:8b:21:
cd:23:b8:a2:d7:74:13:35:65:7a:f6:be:9b:e0:04:
96:62:1a:a6:6e:91:8b:0d:ee:f2:76:01:94:e3:0c:
31:c4:41:78:0c:4f:54:de:cb:a8:8a:09:ea:03:af:
be:6f:e0:77:90:a2:c0:df:da:63:8e:ba:24:40:de:
a6:9f:79:25:6c:db:25:b3:ec:d2:0d:fa:37:ec:ad:
47:01:80:6c:cd:65:df:f7:5f:c2:da:7c:41:4e:15:
2a:b4:21:06:8f:0d:45:ce:28:9c:3f:14:2f:3f:6f:
85:27:24:f6:5f:6e:6f:1a:6d:6f:e4:b0:d0:1c:1c:
42:aa:a6:e2:a9:bb:44:d6:6b:68:83:0e:47:d7:36:
92:ff:0c:97:91:c6:f3:0c:ac:0c:db:90:57:68:51:
03:0b:58:5d:6c:31:eb:9e:f3:ef:11:8e:68:09:ca:
f1:f0:4d:d5:9c:cf:4c:57:a9:b1:46:50:22:6e:da:
e3:67:0c:b2:3b:38:7b:8e:31:4d:23:d7:35:21:db:
35:ee:c9:c6:35:14:7b:34:fe:98:6a:fc:cf:bb:43:
98:ec:ef:74:04:a3:c6:56:95:8a:69:37:22:d2:dd:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C4:D6:BE:1F:D7:67:D4:64:10:11:3A:5E:71:37:68:83:A4:13:85
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a4:c9:3d:76:0e:4a:2d:ac:48:52:76:0f:f7:13:e5:0d:fa:
89:df:b7:c8:16:38:89:73:c1:d4:09:83:54:8d:19:cb:45:e6:
8a:bb:3b:b1:8d:a3:72:9d:95:5a:76:3e:17:b7:9c:9e:c3:98:
fb:cc:50:2d:ff:ef:0c:98:24:57:a3:c9:1d:fb:5e:2b:bd:49:
43:25:4f:7e:c1:a4:6d:e6:fc:ef:12:41:3a:a0:14:47:5b:72:
02:98:f0:a3:cd:07:b4:54:89:3d:13:7a:13:6f:57:dd:f7:0b:
1b:72:19:f4:fd:f9:73:e7:a8:b3:d3:83:6b:eb:74:dc:de:32:
e4:92:fd:2f:87:52:22:6c:9c:9f:8f:df:4c:e3:f5:86:b8:81:
9c:4f:3a:11:8a:77:74:e8:cf:6a:3a:b9:81:96:93:6e:d6:93:
2e:e6:e2:00:67:ff:99:09:97:0b:53:c1:28:ba:4a:da:6a:0b:
66:cf:5d:a4:fc:56:ae:24:78:81:21:6a:39:c9:5d:ab:4d:29:
3f:7a:1c:1d:38:f8:62:46:1f:6c:33:f0:4e:c9:4e:4b:11:0e:
11:1a:d8:18:86:8c:03:df:7d:9e:e1:45:f8:d3:d5:5e:45:b2:
37:ac:0d:83:91:80:8c:c8:05:e2:58:be:86:d7:a0:14:28:17:
8f:6c:73:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0392PaDIv1f9p8iPswuM4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMDIxM2FiYTFlYTkyOGI5ZWQzMjQ5MWRlOWJhMTA0NjRi
MDYzNmMwHhcNMjYwMzI5MDUwMDUyWhcNMjYwMzMwMDUwMDUyWjAzMTEwLwYDVQQD
EyhjMGM0ZDZiZTFmZDc2N2Q0NjQxMDExM2E1ZTcxMzc2ODgzYTQxMzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxUggLiMmXx3/L0hzHRZSFlHADW+
Y4CB/zeLiyHNI7ii13QTNWV69r6b4ASWYhqmbpGLDe7ydgGU4wwxxEF4DE9U3suo
ignqA6++b+B3kKLA39pjjrokQN6mn3klbNsls+zSDfo37K1HAYBszWXf91/C2nxB
ThUqtCEGjw1FziicPxQvP2+FJyT2X25vGm1v5LDQHBxCqqbiqbtE1mtogw5H1zaS
/wyXkcbzDKwM25BXaFEDC1hdbDHrnvPvEY5oCcrx8E3VnM9MV6mxRlAibtrjZwyy
Ozh7jjFNI9c1Ids17snGNRR7NP6YavzPu0OY7O90BKPGVpWKaTci0t0cPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDE1r4f12fUZBAROl5xN2iDpBOFMB8GA1UdIwQY
MBaAFGMCE6uh6pKLntMkkd6boQRksGNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hY2NjNzYtZTEyMy00NWIxLTk2YjQt
OGY0YzU5ZWMyMGJlLzEvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9hY2NjNzYtZTEyMy00NWIxLTk2YjQtOGY0YzU5ZWMyMGJl
LzEvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKTJPXYO
Si2sSFJ2D/cT5Q36id+3yBY4iXPB1AmDVI0Zy0Xmirs7sY2jcp2VWnY+F7ecnsOY
+8xQLf/vDJgkV6PJHfteK71JQyVPfsGkbeb87xJBOqAUR1tyApjwo80HtFSJPRN6
E29X3fcLG3IZ9P35c+eos9ODa+t03N4y5JL9L4dSImycn4/fTOP1hriBnE86EYp3
dOjPajq5gZaTbtaTLubiAGf/mQmXC1PBKLpK2moLZs9dpPxWriR4gSFqOcldq00p
P3ocHTj4YkYfbDPwTslOSxEOERrYGIaMA999nuFF+NPVXkWyN6wNg5GAjMgF4li+
htegFCgXj2xzfw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:48 2026 by rpki-client